Samsung Mobile vulnerabilities, page 5
634 vulnerabilities
Known vulnerabilities in Samsung Mobile products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 176 products.
CVE-2021-25523samsung mobilesamsungdialer+1
EPSS score0.23%
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.CVE-2021-25384googleandroid+1EPSS score0.55%
An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.CVE-2021-25492samsung mobilesamsung notes+1EPSS score0.23%
Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read.CVE-2021-25437linuxtizen+1EPSS score2.35%
Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.CVE-2021-25524samsung mobilecontacts+1EPSS score0.23%
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.CVE-2021-25474googleandroid+1EPSS score0.10%
Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.CVE-2021-25395samsung mobilesamsung mobile devices+1KEVEPSS score0.37%
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.CVE-2021-25481googleandroid+1EPSS score0.10%
An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory.CVE-2021-25381samsung mobilesamsung account+1EPSS score0.21%
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.CVE-2021-25355samsung mobilesamsung notes+1EPSS score0.22%
Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent.CVE-2021-25461googleandroid+1EPSS score0.17%
An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.CVE-2021-25426googleandroid+1EPSS score0.58%
Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files.CVE-2021-25484googleandroid+1EPSS score0.11%
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event.CVE-2021-25505samsung mobilesamsung pass+1EPSS score0.59%
Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.CVE-2021-25511googleandroid+1EPSS score0.11%
An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.CVE-2021-25502googleandroid+1EPSS score0.07%
A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge.CVE-2021-25368samsung mobilesamsung cloud+1EPSS score0.58%
Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed.CVE-2021-25406samsung mobilegear s plugin+1EPSS score0.40%
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information.CVE-2021-25392googleandroid+1EPSS score0.10%
Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path.CVE-2021-25459googleandroid+1EPSS score0.12%
An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.